Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
File: W2c0Iu_35BxeBteOUp9JH1kVD_k.mft (raw, json)
Hash identifier: VgOCdMmIz1mvzBsx6XKVplcUi8LyGEiqrDAo1TLwdO0=
Subject key identifier: 56:C3:97:16:D0:4D:1A:FD:3B:D7:54:5A:42:2A:8F:CF:27:D8:DB:01
Authority key identifier: 5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
Certificate issuer: /CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Certificate serial: 019A4F626654805EAEF3CA7AE3935B8B75ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
Manifest number: 144E
Signing time: Tue 04 Nov 2025 15:00:39 +0000
Manifest this update: Tue 04 Nov 2025 15:00:39 +0000
Manifest next update: Wed 05 Nov 2025 15:00:39 +0000
Files and hashes: 1: W2c0Iu_35BxeBteOUp9JH1kVD_k.crl (hash: vgk/Mu1/v28mwqFlp6lbmntCU1/A3jaffEct16+8TuE=)
2: f2eeaIi_NtiLs6nRUcClmpkBy5k.roa (hash: 8pw5kFZ35WiQs2DDHCW04FDgssajvxmkQJ4ITw5fsyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:66:54:80:5e:ae:f3:ca:7a:e3:93:5b:8b:75:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Validity
Not Before: Nov 4 15:00:39 2025 GMT
Not After : Nov 5 15:00:39 2025 GMT
Subject: CN=56c39716d04d1afd3bd7545a422a8fcf27d8db01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9d:55:13:46:82:17:45:ec:37:2a:d2:94:29:
54:49:53:22:6b:4c:26:7d:a4:69:2f:89:29:47:34:
9b:7d:d2:a9:37:c2:ed:8b:85:3b:82:86:f8:3b:52:
d1:cb:36:90:47:d7:57:37:b3:0c:26:78:18:17:29:
f6:c2:3f:2e:f4:ab:37:b0:98:ab:a1:d2:55:5e:c2:
d6:fa:8e:1c:92:96:04:a2:f5:f2:f0:80:80:65:60:
0b:23:0a:65:02:7f:80:dd:cb:0f:cd:15:b2:98:84:
82:52:09:45:e3:99:95:42:29:bb:00:58:87:ec:cb:
46:b0:c6:b9:de:48:c3:91:91:08:15:f8:60:68:8c:
db:a6:aa:47:64:c1:c1:09:a5:91:66:ba:4d:87:fd:
df:76:67:2b:5e:7f:14:5b:e5:08:df:cd:0c:d5:1c:
d7:9c:a7:e4:25:1d:41:21:24:04:72:d2:f3:21:4f:
0a:55:45:ac:e9:9e:06:c1:d0:0e:eb:da:0c:d2:0e:
4c:21:18:45:52:8c:77:83:9b:72:b9:6b:7c:20:a3:
73:e4:17:2c:cf:07:31:a4:39:b2:e0:16:03:c9:ae:
b9:76:21:ee:40:6c:24:da:1b:b9:ef:b7:b7:3d:db:
81:c0:1c:4c:99:ae:4d:39:5e:79:ab:aa:d8:ef:0b:
12:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C3:97:16:D0:4D:1A:FD:3B:D7:54:5A:42:2A:8F:CF:27:D8:DB:01
X509v3 Authority Key Identifier:
keyid:5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5a:d0:a9:7f:ef:65:dc:3a:25:b9:e8:58:97:d8:28:33:c2:
da:cd:b1:6e:1a:9d:cf:0c:2c:ce:82:e1:57:34:62:55:b4:22:
6f:95:ec:94:35:e7:1e:2c:44:7a:7c:71:be:dc:8e:ae:db:1a:
bf:83:96:5e:1a:e3:8c:c1:91:35:80:74:f3:c4:18:48:33:6d:
4b:51:4a:6f:8c:a3:0a:77:3c:09:be:d3:42:57:84:fb:e1:36:
c7:ee:c1:b3:87:33:3d:c7:25:a9:d9:d1:9e:26:45:46:ee:11:
6e:91:2c:25:0f:a0:49:f6:f2:60:ff:cb:49:13:fe:d5:cb:11:
3d:3d:64:b1:60:6d:b1:bf:48:61:34:36:ec:8b:c7:47:98:57:
6f:ff:78:40:de:25:3f:eb:8e:23:4f:14:5d:07:59:cc:8d:bc:
09:58:ad:45:dd:9b:42:30:ad:b1:5a:27:17:ed:ab:dd:d5:b7:
9b:c0:c3:df:34:a9:52:a1:17:a5:1d:92:58:80:b0:b2:bb:d7:
98:17:4a:51:42:9a:de:f9:0d:01:ab:b7:80:a5:20:29:fe:42:
cb:4e:f8:b5:c6:bd:a8:45:1e:7b:b8:b3:d8:39:bd:3f:6c:7d:
fb:12:65:6c:0f:a1:f7:32:4b:a7:19:cb:bc:a1:21:ba:3a:cc:
a5:ac:6f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:55 2025 by rpki-client